allow cross origin requests from localhost and the dashboard